last executing test programs: 11.909461453s ago: executing program 4 (id=752): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) 10.996521305s ago: executing program 4 (id=755): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e0008"], 0x398}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 9.961460779s ago: executing program 4 (id=760): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 9.037517559s ago: executing program 4 (id=763): socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 9.037212502s ago: executing program 3 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) 8.561354902s ago: executing program 3 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000040)='./file1\x00', 0x4c000, 0x5) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a00180000000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 6.166908932s ago: executing program 3 (id=774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5.929173867s ago: executing program 1 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) 5.591049056s ago: executing program 1 (id=777): syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x234, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x2c0, 0x240, 0x240, 0x2c0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3}, {0xffffffffffffffff, [], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x5, 0x6, 0x7, 0x6], 0x4}, {0xffffffffffffffff, [0x0, 0x0, 0x5, 0x0, 0x6, 0x2], 0x2, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x290) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) 5.034057723s ago: executing program 3 (id=778): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 4.557408652s ago: executing program 3 (id=779): io_uring_setup(0x177f, &(0x7f0000000140)) socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x802) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x22, &(0x7f00000003c0)=0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) io_submit(r4, 0x0, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @timestamp, @sack_perm], 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0xfffffffc) 3.96363265s ago: executing program 0 (id=780): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0xee01}, {0x10000, 0x0, 0x400000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x444, 0x2d0, 0x0, 0x230, 0x230, 0x230, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@addrtype={{0x2c}, {0x60, 0x113, 0x1}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff, 'pim6reg1\x00', 'vxcan1\x00', {0xff}, {}, 0x16, 0x1, 0xc}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x1, 0x40, 0x1}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0xffffffff, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x3, @broadcast, 0x4e23}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0xffffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {0x80}, 0x21, 0x2}, 0x0, 0xbc, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x2c}, {[0x4, 0x1]}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4a0) sendmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10, 0xe000}, 0x5}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.84154529s ago: executing program 2 (id=781): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 3.30644517s ago: executing program 2 (id=782): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x10f, @time, 0x0, {0x0, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc0bc5310, &(0x7f0000000040)={0x0, @time={0x6, 0x2}, 0x0, {0x8d}, 0x6, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x8000, 0x10, 0xff, 0x91, 0x80, 0xd, 0x9d, 0x0, 0x80, 0x8, 0x3, 0x5, 0x3}, {0x90f, 0x200, 0xd, 0xeb, 0x1, 0x10, 0x2, 0x4f, 0xb, 0x4, 0xf2, 0x7, 0xbc1e}, {0x1, 0x7, 0x73, 0x1, 0x5, 0x7e, 0x8, 0x6, 0x2, 0x3, 0x7, 0x6, 0x100}], 0x8001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x7, 0xca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 3.160272722s ago: executing program 0 (id=783): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe6, 0xa}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x4000) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.932255475s ago: executing program 4 (id=784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000040)='./file1\x00', 0x4c000, 0x5) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a00180000000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 2.252885103s ago: executing program 1 (id=785): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x100, 0x70bd2a, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 2.105510387s ago: executing program 2 (id=786): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000008c00)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x20001004) 1.971017776s ago: executing program 2 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) 1.940863711s ago: executing program 1 (id=788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200"/34], 0x120}}, 0x0) read$nci(r0, &(0x7f0000000800)=""/4096, 0x1000) 1.754827668s ago: executing program 2 (id=789): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.675557236s ago: executing program 4 (id=790): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) 1.670417355s ago: executing program 3 (id=791): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.600601983s ago: executing program 0 (id=792): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 1.473527314s ago: executing program 1 (id=793): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x800, 0x34324152, 0x2, 0xb, [{}, {}, {0xfffffffd}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x20) recvmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x1}], 0x1, 0x2020, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1a00001d05000000110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB='2\x00\x00\x00\x00x\x00'], 0x10) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.pending_reads\x00', 0x200000, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getstats={0x1c, 0x5e, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 875.590965ms ago: executing program 0 (id=794): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0xee01}, {0x10000, 0x0, 0x400000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x444, 0x2d0, 0x0, 0x230, 0x230, 0x230, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@addrtype={{0x2c}, {0x60, 0x113, 0x1}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff, 'pim6reg1\x00', 'vxcan1\x00', {0xff}, {}, 0x16, 0x1, 0xc}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x1, 0x40, 0x1}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0xffffffff, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x3, @broadcast, 0x4e23}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0xffffff00, 'vxcan1\x00', 'dummy0\x00', {0xff}, {0x80}, 0x21, 0x2}, 0x0, 0xbc, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x2c}, {[0x4, 0x1]}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4a0) sendmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10, 0xe000}, 0x5}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 839.162362ms ago: executing program 2 (id=795): syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x234, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x2c0, 0x240, 0x240, 0x2c0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3}, {0xffffffffffffffff, [], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x5, 0x6, 0x7, 0x6], 0x4}, {0xffffffffffffffff, [0x0, 0x0, 0x5, 0x0, 0x6, 0x2], 0x2, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x290) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) 228.084942ms ago: executing program 1 (id=796): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) socket$tipc(0x1e, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f00000000c0), 0x12) syz_emit_ethernet(0x4c, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000aa639bfa5a67b77e6f73ff55aaaaaaaa2608002ef0007e00000000002f9078acc8c7d82e09bdbb5e1e0001e00000012001880b00229078282ecac3c3b75b81bc76020000000000000000004cf8df5c42bf"], 0x0) 152.182604ms ago: executing program 0 (id=797): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000008c00)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x20001004) 0s ago: executing program 0 (id=798): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018460000ffbf000000001d68f7d800009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b06d66c36e3d8322252471218f40011ea04d0b498918c5e1e1edbb093dd9baab29feda87154822ed7c134d43056811ea58ed275fcf0b193e9ed4f0dd1e720c72e1f33b846e8bacb7f7645872137b1d0e010c136ffcdea9085bf930a20e318723455dfccdf067b62f07224a630bccd5e80b73cadc500014cd264776128b6777d084eef426e6fcbf639c4d437ccaff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB="00941b1294590a28c7bd350f0e9245000cc8bf4a00001b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xde4d, @private0, 0x1}}, 0x4, 0x9, 0x8000, 0x51, 0xa8, 0xfb, 0x7}, &(0x7f0000000000)=0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="f300000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc020000000000000000000000000000040012"], 0x64}}, 0x0) syz_emit_ethernet(0x11e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) sendto$inet6(r2, &(0x7f0000000040)="ff", 0x1, 0x40408c4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private1, 0x7}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r7}, 0x18) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0xe) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000a1000/0x1000)=nil, 0x3000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 57.457091][ T5818] cgroup: Unknown subsys name 'net' [ 57.587892][ T5818] cgroup: Unknown subsys name 'cpuset' [ 57.596467][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.946469][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.212543][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.220921][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.230376][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.255736][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.258538][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.271801][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.272038][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.279321][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.296049][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.297868][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.303322][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.311441][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.328003][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.335524][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.344790][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.344848][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.352062][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.365256][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.367776][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.374819][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.387253][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.388229][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.395366][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.409267][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.409542][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.425028][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.429251][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.450312][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.484561][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.492115][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.802335][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 62.850259][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 63.013588][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 63.044137][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 63.054910][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.062048][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.069996][ T5831] bridge_slave_0: entered allmulticast mode [ 63.077283][ T5831] bridge_slave_0: entered promiscuous mode [ 63.115128][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.122276][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.129545][ T5831] bridge_slave_1: entered allmulticast mode [ 63.136678][ T5831] bridge_slave_1: entered promiscuous mode [ 63.169450][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.176723][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.183885][ T5829] bridge_slave_0: entered allmulticast mode [ 63.190955][ T5829] bridge_slave_0: entered promiscuous mode [ 63.239751][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.250057][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.257312][ T5829] bridge_slave_1: entered allmulticast mode [ 63.263884][ T5829] bridge_slave_1: entered promiscuous mode [ 63.289927][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.300351][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 63.336274][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.374952][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.416208][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.440073][ T5831] team0: Port device team_slave_0 added [ 63.455865][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.463032][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.470226][ T5828] bridge_slave_0: entered allmulticast mode [ 63.476908][ T5828] bridge_slave_0: entered promiscuous mode [ 63.501066][ T5831] team0: Port device team_slave_1 added [ 63.526415][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.533565][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.540861][ T5828] bridge_slave_1: entered allmulticast mode [ 63.547660][ T5828] bridge_slave_1: entered promiscuous mode [ 63.555007][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.562134][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.569669][ T5843] bridge_slave_0: entered allmulticast mode [ 63.576463][ T5843] bridge_slave_0: entered promiscuous mode [ 63.586393][ T5829] team0: Port device team_slave_0 added [ 63.599529][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.606863][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.614007][ T5830] bridge_slave_0: entered allmulticast mode [ 63.621062][ T5830] bridge_slave_0: entered promiscuous mode [ 63.629665][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.637307][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.645129][ T5830] bridge_slave_1: entered allmulticast mode [ 63.651722][ T5830] bridge_slave_1: entered promiscuous mode [ 63.674328][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.681439][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.689246][ T5843] bridge_slave_1: entered allmulticast mode [ 63.696103][ T5843] bridge_slave_1: entered promiscuous mode [ 63.703945][ T5829] team0: Port device team_slave_1 added [ 63.726991][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.733972][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.760275][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.802867][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.810342][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.836341][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.849559][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.863223][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.888812][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.896127][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.922457][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.935277][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.942265][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.969155][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.988537][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.007967][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.028572][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.039850][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.097164][ T5843] team0: Port device team_slave_0 added [ 64.120928][ T5830] team0: Port device team_slave_0 added [ 64.129765][ T5828] team0: Port device team_slave_0 added [ 64.137652][ T5843] team0: Port device team_slave_1 added [ 64.154013][ T5831] hsr_slave_0: entered promiscuous mode [ 64.160981][ T5831] hsr_slave_1: entered promiscuous mode [ 64.179831][ T5830] team0: Port device team_slave_1 added [ 64.196717][ T5828] team0: Port device team_slave_1 added [ 64.212560][ T5829] hsr_slave_0: entered promiscuous mode [ 64.219589][ T5829] hsr_slave_1: entered promiscuous mode [ 64.226385][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.234707][ T5829] Cannot create hsr debugfs directory [ 64.281548][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.288703][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.315360][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.328680][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.335746][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.362059][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.373535][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.380677][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.406929][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.418528][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.428572][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.435804][ T5838] Bluetooth: hci1: command tx timeout [ 64.454828][ T5848] Bluetooth: hci4: command tx timeout [ 64.460567][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.477687][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.484884][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.510837][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.521554][ T5848] Bluetooth: hci2: command tx timeout [ 64.527842][ T5838] Bluetooth: hci3: command tx timeout [ 64.528094][ T5838] Bluetooth: hci0: command tx timeout [ 64.544034][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.551115][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.577835][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.699153][ T5830] hsr_slave_0: entered promiscuous mode [ 64.706310][ T5830] hsr_slave_1: entered promiscuous mode [ 64.712624][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.720542][ T5830] Cannot create hsr debugfs directory [ 64.738488][ T5843] hsr_slave_0: entered promiscuous mode [ 64.745038][ T5843] hsr_slave_1: entered promiscuous mode [ 64.751130][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.762099][ T5843] Cannot create hsr debugfs directory [ 64.778640][ T5828] hsr_slave_0: entered promiscuous mode [ 64.785173][ T5828] hsr_slave_1: entered promiscuous mode [ 64.791132][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.798864][ T5828] Cannot create hsr debugfs directory [ 65.019635][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.032689][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.056576][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.092577][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.172773][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.182457][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.206928][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.218893][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.255552][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.286005][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.296161][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.308441][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.386444][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.398034][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.416061][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.440082][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.465758][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.497841][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.519875][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.529551][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.542177][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.589354][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.637567][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.644882][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.674864][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.685815][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.692940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.728021][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.741510][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.781498][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.788652][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.808699][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.815859][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.836554][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.863565][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.892200][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.917463][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.924608][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.949736][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.956840][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.068344][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.088317][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.125519][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.132634][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.157970][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.165243][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.212116][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.280033][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.302351][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.309558][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.326555][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.333685][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.371053][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.413884][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.514844][ T5838] Bluetooth: hci1: command tx timeout [ 66.514938][ T5848] Bluetooth: hci4: command tx timeout [ 66.555172][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.577875][ T5831] veth0_vlan: entered promiscuous mode [ 66.594776][ T5848] Bluetooth: hci2: command tx timeout [ 66.595250][ T5838] Bluetooth: hci3: command tx timeout [ 66.600188][ T5842] Bluetooth: hci0: command tx timeout [ 66.648815][ T5831] veth1_vlan: entered promiscuous mode [ 66.657425][ T5843] veth0_vlan: entered promiscuous mode [ 66.720523][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.736171][ T5843] veth1_vlan: entered promiscuous mode [ 66.787182][ T5831] veth0_macvtap: entered promiscuous mode [ 66.802140][ T5829] veth0_vlan: entered promiscuous mode [ 66.835258][ T5843] veth0_macvtap: entered promiscuous mode [ 66.842357][ T5831] veth1_macvtap: entered promiscuous mode [ 66.863263][ T5829] veth1_vlan: entered promiscuous mode [ 66.873585][ T5843] veth1_macvtap: entered promiscuous mode [ 66.898641][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.938322][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.951253][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.969504][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.983036][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.003680][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.030345][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.039689][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.049532][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.058684][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082681][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.093743][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.105827][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.126615][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.135537][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144583][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.153284][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.180768][ T5829] veth0_macvtap: entered promiscuous mode [ 67.200579][ T5829] veth1_macvtap: entered promiscuous mode [ 67.275519][ T5830] veth0_vlan: entered promiscuous mode [ 67.296859][ T5828] veth0_vlan: entered promiscuous mode [ 67.304019][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.316146][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.327503][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.338322][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.349217][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.392569][ T5828] veth1_vlan: entered promiscuous mode [ 67.400344][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.413738][ T5830] veth1_vlan: entered promiscuous mode [ 67.419779][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.439376][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.451766][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.462257][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.472803][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.483754][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.511737][ T5828] veth0_macvtap: entered promiscuous mode [ 67.518229][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.521345][ T5828] veth1_macvtap: entered promiscuous mode [ 67.532652][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.543411][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.553068][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.562392][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571580][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.621162][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.632352][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.644075][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.655615][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.667302][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.677799][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.688998][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.710897][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.725789][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.736235][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.746768][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.756864][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.767313][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.778470][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.792674][ T5830] veth0_macvtap: entered promiscuous mode [ 67.801306][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.812400][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.822046][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.823020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.831620][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.847938][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.867410][ T3949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.876638][ T3949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.891069][ T5830] veth1_macvtap: entered promiscuous mode [ 67.934145][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.964511][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.975124][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.985017][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.995518][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.005436][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.015919][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.026088][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.036712][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.048432][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.078556][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.088744][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.108927][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.119836][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.129761][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.140592][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.150828][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.161437][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.171322][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.181818][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.194642][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.232905][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.241153][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.273531][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.300790][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.321570][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.330547][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.339544][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.351221][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.414465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.424480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.601001][ T5848] Bluetooth: hci1: command tx timeout [ 68.607016][ T5848] Bluetooth: hci4: command tx timeout [ 68.647976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.655784][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.675290][ T5848] Bluetooth: hci2: command tx timeout [ 68.680904][ T5848] Bluetooth: hci3: command tx timeout [ 68.686403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.697437][ T5842] Bluetooth: hci0: command tx timeout [ 68.710600][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.734454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.047220][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.118091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.134383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.142992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.151667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.256699][ T5916] block nbd0: shutting down sockets [ 69.317426][ T3949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.325387][ T3984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.361213][ T3949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.369380][ T3984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.689785][ T5842] Bluetooth: hci4: command tx timeout [ 70.696914][ T5842] Bluetooth: hci1: command tx timeout [ 70.754541][ T5848] Bluetooth: hci3: command tx timeout [ 70.760069][ T5842] Bluetooth: hci0: command tx timeout [ 70.767137][ T5842] Bluetooth: hci2: command tx timeout [ 71.582434][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.589050][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.617732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.988211][ T5956] batadv0: entered promiscuous mode [ 72.126402][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.003969][ T5979] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 74.655713][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.665952][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.784344][ T5987] program syz.4.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.827337][ T5987] ubi0: attaching mtd0 [ 74.838789][ T5989] binder: 5988:5989 ioctl 40046205 0 returned -22 [ 74.860723][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 74.870442][ T5987] ubi0: scanning is finished [ 74.875169][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 74.886488][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.899813][ T5987] ubi0: empty MTD device detected [ 74.904267][ T5883] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.905200][ T46] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 74.929089][ T46] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.940186][ T46] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.950418][ T46] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 74.967996][ T46] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 74.977377][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.031817][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.093082][ T5883] usb 1-1: config 0 descriptor?? [ 75.211906][ T5987] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 75.222341][ T5987] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 75.229870][ T5987] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 75.237471][ T5987] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 75.245131][ T5987] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 75.252212][ T5987] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 75.262387][ T5987] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1413863467 [ 75.272911][ T5987] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 75.302451][ T5996] ubi0: background thread "ubi_bgt0d" started, PID 5996 [ 75.383669][ T5883] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 75.482770][ T46] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 75.492878][ T46] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 75.524339][ T46] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 75.569144][ T46] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 75.764607][ T46] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 75.777658][ T46] ntrig 0003:1B96:000A.0001: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 77.232996][ T5981] ntrig 0003:1B96:000A.0001: pid 5981 passed too short report [ 77.438836][ T46] usb 4-1: USB disconnect, device number 2 [ 78.089467][ T6014] Zero length message leads to an empty skb [ 78.129857][ T46] usb 1-1: USB disconnect, device number 2 [ 78.799101][ T6019] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 78.948601][ T6019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.960177][ T6019] team0: Port device bond1 added [ 80.314374][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.333724][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22'. [ 80.495181][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 80.575778][ T5883] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 80.587515][ T5883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.597606][ T5883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.607832][ T5883] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.620928][ T5883] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.630549][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.005667][ T5883] usb 1-1: GET_CAPABILITIES returned 0 [ 81.011208][ T5883] usbtmc 1-1:16.0: can't read capabilities [ 81.105313][ T6039] 9pnet_virtio: no channels available for device syz [ 81.216751][ T5912] usb 1-1: USB disconnect, device number 3 [ 81.649632][ T6046] input: syz1 as /devices/virtual/input/input5 [ 81.840395][ T974] cfg80211: failed to load regulatory.db [ 81.849837][ T6047] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.949822][ T6047] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.952425][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 84.199791][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 84.555297][ T6078] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.596936][ T6077] can0: slcan on ttyS3. [ 85.897139][ T6092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 85.978258][ T29] audit: type=1326 audit(1736391858.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385b85d29 code=0x7ffc0000 [ 86.011267][ T29] audit: type=1326 audit(1736391858.130:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385b85d29 code=0x7ffc0000 [ 86.033726][ T29] audit: type=1326 audit(1736391858.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd385b85d29 code=0x7ffc0000 [ 86.062563][ T29] audit: type=1326 audit(1736391858.130:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385b85d29 code=0x7ffc0000 [ 86.086281][ T29] audit: type=1326 audit(1736391858.130:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd385b85d29 code=0x7ffc0000 [ 86.276539][ T6077] can0 (unregistered): slcan off ttyS3. [ 86.746508][ T6107] bridge0: entered promiscuous mode [ 86.804616][ T6107] macvlan2: entered promiscuous mode [ 86.825558][ T6107] bridge0: port 3(macvlan2) entered blocking state [ 86.964123][ T6107] bridge0: port 3(macvlan2) entered disabled state [ 86.971024][ T6107] macvlan2: entered allmulticast mode [ 86.976508][ T6107] bridge0: entered allmulticast mode [ 86.984018][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 87.001013][ T6107] macvlan2: left allmulticast mode [ 87.006192][ T6107] bridge0: left allmulticast mode [ 87.034818][ T6107] bridge0: left promiscuous mode [ 87.620419][ T6126] pim6reg: entered allmulticast mode [ 87.628842][ T6132] pim6reg: left allmulticast mode [ 89.425488][ T29] audit: type=1326 audit(1736391861.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498f85d29 code=0x7ffc0000 [ 89.452381][ T29] audit: type=1326 audit(1736391861.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498f85d29 code=0x7ffc0000 [ 89.466817][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 89.474600][ T29] audit: type=1326 audit(1736391861.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc498f85d29 code=0x7ffc0000 [ 89.505059][ T29] audit: type=1326 audit(1736391861.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498f85d29 code=0x7ffc0000 [ 89.527157][ T29] audit: type=1326 audit(1736391861.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498f85d29 code=0x7ffc0000 [ 90.219616][ T6165] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 90.341438][ T6166] bond1 (unregistering): Released all slaves [ 90.415224][ T6169] siw: device registration error -23 [ 90.856122][ T6175] 9pnet_virtio: no channels available for device syz [ 91.995995][ T6184] bridge0: entered promiscuous mode [ 92.001300][ T6184] macvlan2: entered promiscuous mode [ 92.056669][ T6184] bridge0: port 3(macvlan2) entered blocking state [ 92.068837][ T6184] bridge0: port 3(macvlan2) entered disabled state [ 92.094945][ T6184] macvlan2: entered allmulticast mode [ 92.124532][ T6184] bridge0: entered allmulticast mode [ 92.195261][ T6184] macvlan2: left allmulticast mode [ 92.201112][ T6184] bridge0: left allmulticast mode [ 92.238960][ T6184] bridge0: left promiscuous mode [ 93.744347][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.896606][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 93.906480][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.917872][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.941026][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.956428][ T6217] program syz.3.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.971820][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.014050][ T6217] ubi: mtd0 is already attached to ubi0 [ 94.029772][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.045452][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.078450][ T6219] pim6reg: entered allmulticast mode [ 94.099310][ T6219] pim6reg: left allmulticast mode [ 94.122064][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.261655][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 94.267320][ T9] usbtmc 2-1:16.0: can't read capabilities [ 94.274417][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 94.309463][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.320441][ T5883] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.337374][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.348152][ T5883] usb 3-1: config 0 descriptor?? [ 94.554071][ T9] usb 2-1: USB disconnect, device number 2 [ 94.641643][ T5883] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.964770][ T6229] bond1 (unregistering): Released all slaves [ 96.512211][ T6246] bond1 (unregistering): Released all slaves [ 96.805314][ T6235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.815119][ T6235] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.833973][ T6235] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.857202][ T6235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.863205][ T6235] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.874597][ T6235] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.908194][ T6235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.145324][ T6235] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.060381][ T6235] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.086432][ T6235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.094384][ T6235] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.175477][ T6235] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.177316][ T974] usb 3-1: USB disconnect, device number 2 [ 98.194554][ T6235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.200552][ T6235] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.339583][ T6235] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 98.443406][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.852361][ T6276] program syz.0.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.914347][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.920380][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.994909][ T6276] ubi: mtd0 is already attached to ubi0 [ 99.174590][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.344991][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 99.495159][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 99.574134][ T9] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.607760][ T9] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.618245][ T9] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 99.631638][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 99.640957][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.957360][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.963599][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 100.970835][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.981739][ T9] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 100.988730][ T9] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 100.997232][ T9] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 101.005437][ T9] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 101.013946][ T9] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 101.023269][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.029775][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.036385][ T9] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 101.268465][ T9] usb 4-1: USB disconnect, device number 3 [ 101.444307][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.614392][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 101.636388][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.651821][ T5881] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.694280][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.729915][ T5881] usb 1-1: config 0 descriptor?? [ 103.022860][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.029145][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 103.035288][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.091006][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.091014][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.147729][ T5881] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.681961][ T46] usb 1-1: USB disconnect, device number 4 [ 105.182683][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.188856][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 107.224268][ T974] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.364365][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.384859][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 107.413024][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.480371][ T974] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.524247][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 107.533788][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.545972][ T5881] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.560397][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.570398][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.595253][ T5881] usb 2-1: config 0 descriptor?? [ 107.608554][ T974] usb 1-1: config 0 descriptor?? [ 107.854310][ T5881] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 107.855328][ T974] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 110.370138][ T974] usb 2-1: USB disconnect, device number 3 [ 111.929295][ T5928] usb 1-1: USB disconnect, device number 5 [ 113.993333][ T6412] pim6reg: entered allmulticast mode [ 114.070385][ T6420] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 114.486390][ T5883] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.730024][ T29] audit: type=1800 audit(1736391886.930:12): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.137" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 115.414338][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 115.446565][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.477470][ T5883] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.544363][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.622082][ T5883] usb 1-1: config 0 descriptor?? [ 115.700206][ T6447] netlink: 48 bytes leftover after parsing attributes in process `syz.4.141'. [ 115.842902][ T5883] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.902121][ T6451] pim6reg: entered allmulticast mode [ 116.049886][ T6461] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 116.080583][ T6461] bond2: entered promiscuous mode [ 116.092979][ T6461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.661745][ T29] audit: type=1800 audit(1736391889.750:13): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.149" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 117.695607][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.257533][ T9] usb 1-1: USB disconnect, device number 6 [ 118.287857][ T6489] netlink: 48 bytes leftover after parsing attributes in process `syz.3.154'. [ 118.389372][ T6493] pim6reg: entered allmulticast mode [ 120.124403][ T974] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.296315][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 120.304022][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.324280][ T974] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.338373][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.362655][ T974] usb 4-1: config 0 descriptor?? [ 120.602861][ T6533] netlink: 48 bytes leftover after parsing attributes in process `syz.4.170'. [ 120.643081][ T974] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 123.384443][ T5882] usb 4-1: USB disconnect, device number 4 [ 124.021367][ T6580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.185'. [ 124.195655][ T6584] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 124.286292][ T6584] bond1: entered promiscuous mode [ 124.292435][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.368726][ T6592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.388052][ T6592] bond1: (slave bond2): making interface the new active one [ 124.418225][ T6592] bond2: entered promiscuous mode [ 124.432772][ T6592] bond1: (slave bond2): Enslaving as an active interface with an up link [ 124.735750][ T974] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.924835][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 124.936361][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.224300][ T974] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.233439][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.370103][ T974] usb 4-1: config 0 descriptor?? [ 125.886916][ T974] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.064706][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.087890][ T6608] block nbd2: shutting down sockets [ 126.142169][ T6622] netlink: 48 bytes leftover after parsing attributes in process `syz.4.200'. [ 126.217898][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 126.230370][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.251832][ T5881] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.312821][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.445370][ T5881] usb 2-1: config 0 descriptor?? [ 127.186270][ T6631] pim6reg: entered allmulticast mode [ 127.219853][ T5881] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 128.294186][ T5928] usb 4-1: USB disconnect, device number 5 [ 129.363500][ T25] usb 2-1: USB disconnect, device number 4 [ 130.861724][ T6662] block nbd4: shutting down sockets [ 131.434573][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.494395][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.584241][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 131.591903][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.603344][ T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.612818][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.622693][ T25] usb 3-1: config 0 descriptor?? [ 131.644293][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 131.652447][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.667808][ T5928] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.677156][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.693507][ T5928] usb 2-1: config 0 descriptor?? [ 131.838672][ T25] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 132.008237][ T5928] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 133.144586][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151020][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.276484][ T6708] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 134.757289][ T6713] block nbd4: shutting down sockets [ 135.066671][ T46] usb 3-1: USB disconnect, device number 3 [ 135.104358][ T6708] bond1: entered promiscuous mode [ 135.129680][ T6708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.142030][ T6711] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 135.515142][ T46] usb 2-1: USB disconnect, device number 5 [ 136.146320][ T6746] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 136.299653][ T6746] bond2: entered promiscuous mode [ 136.348336][ T6746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.521681][ T6749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.530307][ T6749] bond2: (slave bond3): making interface the new active one [ 136.537799][ T6749] bond3: entered promiscuous mode [ 136.544818][ T6749] bond2: (slave bond3): Enslaving as an active interface with an up link [ 136.924278][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.074486][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 137.084592][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.103045][ T5881] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.124258][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.139765][ T5881] usb 1-1: config 0 descriptor?? [ 137.412544][ T5881] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.047451][ T6780] netlink: 48 bytes leftover after parsing attributes in process `syz.4.253'. [ 140.551086][ T5882] usb 1-1: USB disconnect, device number 7 [ 140.625028][ T6790] overlayfs: failed to resolve './file0': -2 [ 142.217208][ T6809] netlink: 48 bytes leftover after parsing attributes in process `syz.4.266'. [ 142.494351][ T5883] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.664381][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.684246][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 142.691054][ T5883] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 142.702293][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.713765][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.723819][ T5883] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.736867][ T5883] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.746094][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.844235][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 142.860551][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.891766][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.911962][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.941683][ T9] usb 5-1: config 0 descriptor?? [ 142.980460][ T5883] usb 3-1: GET_CAPABILITIES returned 0 [ 143.000983][ T5883] usbtmc 3-1:16.0: can't read capabilities [ 143.199285][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 143.224243][ T5883] usb 3-1: USB disconnect, device number 4 [ 144.764565][ T6832] overlayfs: failed to resolve './file0': -2 [ 145.694375][ T5928] usb 5-1: USB disconnect, device number 2 [ 145.864555][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.279'. [ 146.364269][ T5928] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.498464][ T6867] overlayfs: failed to resolve './file0': -2 [ 146.574554][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 146.586900][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 146.700177][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.793920][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.886651][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.933569][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.943210][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.081741][ T6880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.294'. [ 147.161226][ T5928] usb 2-1: GET_CAPABILITIES returned 0 [ 147.166827][ T5928] usbtmc 2-1:16.0: can't read capabilities [ 147.458666][ T5912] usb 2-1: USB disconnect, device number 6 [ 148.969473][ T6903] block nbd0: shutting down sockets [ 149.037090][ T6909] overlayfs: failed to resolve './file1': -2 [ 149.039031][ T6910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.306'. [ 150.307911][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.754838][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 150.763164][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 150.776232][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 150.786866][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.796977][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.810205][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.819441][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.066574][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 151.073422][ T9] usbtmc 1-1:16.0: can't read capabilities [ 151.423927][ T9] usb 1-1: USB disconnect, device number 8 [ 151.900630][ T6954] overlayfs: failed to resolve './file1': -2 [ 152.114719][ T6956] bond4 (unregistering): Released all slaves [ 154.660043][ T6991] pim6reg: entered allmulticast mode [ 154.691654][ T6990] pim6reg: left allmulticast mode [ 154.844307][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.980264][ T6996] bond2 (unregistering): Released all slaves [ 155.004335][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 155.023670][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 155.119650][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.171259][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.203726][ T7001] overlayfs: failed to resolve './file1': -2 [ 155.228820][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.274289][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.758446][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.362895][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 156.368970][ T9] usbtmc 3-1:16.0: can't read capabilities [ 157.040819][ T9] usb 3-1: USB disconnect, device number 5 [ 157.267635][ T7025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.350'. [ 157.434545][ T7033] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 157.467997][ T7033] bond2: entered promiscuous mode [ 157.483864][ T7033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.646028][ T7038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.672156][ T7038] bond2: (slave bond3): making interface the new active one [ 157.703473][ T7038] bond3: entered promiscuous mode [ 157.784947][ T7038] bond2: (slave bond3): Enslaving as an active interface with an up link [ 158.454266][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.604291][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 158.610724][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 158.621881][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.632008][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.641939][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.657957][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.670854][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.889131][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 158.962753][ T9] usbtmc 4-1:16.0: can't read capabilities [ 158.987307][ T7041] block nbd4: shutting down sockets [ 159.098059][ T9] usb 4-1: USB disconnect, device number 6 [ 159.449104][ T7060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.646259][ T7065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.363'. [ 160.789949][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'. [ 161.434427][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.611414][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 161.717573][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.746595][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.763408][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.784582][ T9] usb 2-1: config 0 descriptor?? [ 161.864399][ T5912] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.009224][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 162.044293][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 162.051747][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 162.077455][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.114363][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.134195][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.150721][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.160674][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.169068][ T7107] netlink: 48 bytes leftover after parsing attributes in process `syz.3.376'. [ 162.389286][ T5912] usb 3-1: GET_CAPABILITIES returned 0 [ 163.079004][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 163.090958][ T5912] usb 3-1: USB disconnect, device number 6 [ 163.914541][ T7119] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 163.952348][ T7119] bond4: entered promiscuous mode [ 163.966363][ T7119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.038787][ T7126] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.070501][ T7126] bond4: (slave bond5): making interface the new active one [ 164.080962][ T7126] bond5: entered promiscuous mode [ 164.159142][ T7126] bond4: (slave bond5): Enslaving as an active interface with an up link [ 164.171471][ T974] usb 2-1: USB disconnect, device number 7 [ 164.850911][ T7128] block nbd0: shutting down sockets [ 165.632092][ T7145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.388'. [ 165.780931][ T7149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.390'. [ 167.709672][ T7183] siw: device registration error -23 [ 168.287402][ T7190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.402'. [ 168.475274][ T7184] block nbd2: shutting down sockets [ 169.172962][ T7200] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 169.243256][ T7200] bond4: entered promiscuous mode [ 169.434498][ T7200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.859550][ T7202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.395651][ T7202] bond4: (slave bond5): making interface the new active one [ 170.434361][ T7202] bond5: entered promiscuous mode [ 170.458926][ T7202] bond4: (slave bond5): Enslaving as an active interface with an up link [ 170.839688][ T7220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.414'. [ 171.870963][ T7224] block nbd1: shutting down sockets [ 171.918191][ T29] audit: type=1800 audit(1736391944.130:14): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.419" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 172.075679][ T7249] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 172.264341][ T7249] bond4: entered promiscuous mode [ 172.269875][ T7249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.306391][ T7255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.426'. [ 172.492322][ T7249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.529874][ T7249] bond4: (slave bond5): making interface the new active one [ 172.570662][ T7249] bond5: entered promiscuous mode [ 172.606944][ T7249] bond4: (slave bond5): Enslaving as an active interface with an up link [ 173.961443][ T7278] block nbd3: shutting down sockets [ 174.033777][ T7291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.439'. [ 174.243817][ T7299] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 175.110995][ T7299] bond3: entered promiscuous mode [ 175.116717][ T7299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.784021][ T7305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.865320][ T7305] bond3: (slave bond4): making interface the new active one [ 175.872685][ T7305] bond4: entered promiscuous mode [ 175.984909][ T7305] bond3: (slave bond4): Enslaving as an active interface with an up link [ 177.374783][ T7332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.453'. [ 178.084728][ T7325] block nbd1: shutting down sockets [ 178.914587][ T7367] netlink: 48 bytes leftover after parsing attributes in process `syz.2.465'. [ 179.168400][ T7370] bond6 (unregistering): Released all slaves [ 180.398298][ T7383] block nbd0: shutting down sockets [ 180.418581][ T7398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.476'. [ 181.585978][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.2.488'. [ 182.837995][ T7445] block nbd3: shutting down sockets [ 184.726456][ T7486] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 184.843584][ T7488] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 185.427140][ T7486] team0: Port device netdevsim0 added [ 185.494704][ T7488] team0: Port device netdevsim0 removed [ 185.503478][ T7488] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 186.392413][ T7501] block nbd2: shutting down sockets [ 186.460141][ T7507] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 186.526264][ T7507] bond1: entered promiscuous mode [ 186.531609][ T7507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.707596][ T7514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.717509][ T7514] bond1: (slave bond2): making interface the new active one [ 186.724989][ T7514] bond2: entered promiscuous mode [ 186.730821][ T7514] bond1: (slave bond2): Enslaving as an active interface with an up link [ 187.588303][ T29] audit: type=1326 audit(1736391959.800:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 187.618271][ T29] audit: type=1326 audit(1736391959.830:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 187.673176][ T29] audit: type=1326 audit(1736391959.850:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 187.720100][ T29] audit: type=1326 audit(1736391959.850:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 188.097237][ T29] audit: type=1326 audit(1736391959.850:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 188.395001][ T29] audit: type=1326 audit(1736391959.880:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 188.584436][ T29] audit: type=1326 audit(1736391959.880:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 188.980982][ T29] audit: type=1326 audit(1736391959.880:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 189.204515][ T29] audit: type=1326 audit(1736391960.060:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 189.533776][ T29] audit: type=1326 audit(1736391960.060:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c6585d29 code=0x7ffc0000 [ 190.103168][ T7546] block nbd3: shutting down sockets [ 190.562441][ T7563] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 191.237550][ T7563] bond6: entered promiscuous mode [ 191.254970][ T7563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.365780][ T7564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.373547][ T7564] bond6: (slave bond7): making interface the new active one [ 191.381062][ T7564] bond7: entered promiscuous mode [ 191.388259][ T7564] bond6: (slave bond7): Enslaving as an active interface with an up link [ 191.470570][ T7576] input: syz1 as /devices/virtual/input/input12 [ 193.673180][ T7611] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 193.755658][ T7611] bond6: entered promiscuous mode [ 193.801156][ T7611] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.878069][ T7617] 8021q: adding VLAN 0 to HW filter on device bond7 [ 193.916067][ T7617] bond6: (slave bond7): making interface the new active one [ 193.923420][ T7617] bond7: entered promiscuous mode [ 193.946251][ T7617] bond6: (slave bond7): Enslaving as an active interface with an up link [ 194.374265][ T5883] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.496582][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.508977][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.784399][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 194.824692][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.860104][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.973990][ T5883] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 195.185422][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.202759][ T5883] usb 2-1: config 0 descriptor?? [ 195.667304][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 195.694250][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.940060][ T5883] usb 2-1: USB disconnect, device number 8 [ 196.522039][ T7658] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 196.551291][ T7658] bond3: entered promiscuous mode [ 196.634700][ T7658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.664759][ T5881] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 196.743170][ T7661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.753110][ T7661] bond3: (slave bond4): making interface the new active one [ 196.760848][ T7661] bond4: entered promiscuous mode [ 196.766597][ T7661] bond3: (slave bond4): Enslaving as an active interface with an up link [ 196.855344][ T5881] usb 3-1: device descriptor read/64, error -71 [ 197.114255][ T5881] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.974288][ T5881] usb 3-1: device descriptor read/64, error -71 [ 198.847573][ T5881] usb usb3-port1: attempt power cycle [ 199.194313][ T5881] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.232416][ T5881] usb 3-1: device descriptor read/8, error -71 [ 199.760028][ T7708] netlink: 'syz.0.575': attribute type 1 has an invalid length. [ 199.902976][ T7708] bond8: entered promiscuous mode [ 200.036739][ T7708] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.143474][ T7712] 8021q: adding VLAN 0 to HW filter on device bond9 [ 200.311430][ T7712] bond8: (slave bond9): making interface the new active one [ 200.319158][ T7712] bond9: entered promiscuous mode [ 200.339577][ T7712] bond8: (slave bond9): Enslaving as an active interface with an up link [ 202.886843][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 202.905029][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.916524][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 202.934244][ T5881] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.044382][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 203.051364][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.144552][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 203.153643][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.179403][ T5881] usb 2-1: device descriptor read/64, error -71 [ 203.716276][ T9] usb 3-1: config 0 descriptor?? [ 203.776500][ T7757] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 203.792508][ T7757] bond6: entered promiscuous mode [ 203.798180][ T7757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.873517][ T7757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.884450][ T5881] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.891906][ T7757] bond6: (slave bond7): making interface the new active one [ 203.938214][ T7757] bond7: entered promiscuous mode [ 203.949372][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 203.998354][ T7757] bond6: (slave bond7): Enslaving as an active interface with an up link [ 204.014255][ T5881] usb 2-1: device descriptor read/64, error -71 [ 204.144587][ T5881] usb usb2-port1: attempt power cycle [ 206.347302][ T5839] usb 3-1: USB disconnect, device number 11 [ 207.614968][ T7796] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 207.899029][ T5881] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.918154][ T7806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.605'. [ 208.123111][ T7814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.618'. [ 208.132315][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.154270][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 208.161223][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.177772][ T5881] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.187005][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.196891][ T5881] usb 2-1: config 0 descriptor?? [ 208.304492][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 208.316280][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 208.337133][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.378773][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.420431][ T5881] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 208.464349][ T5912] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 208.644492][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 208.655785][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.674905][ T5912] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.683999][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.726968][ T5912] usb 1-1: config 0 descriptor?? [ 209.945972][ T5912] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 210.787579][ T5839] usb 2-1: USB disconnect, device number 12 [ 210.841884][ T46] usb 4-1: USB disconnect, device number 7 [ 210.918067][ T7840] netlink: 96 bytes leftover after parsing attributes in process `syz.1.614'. [ 210.991985][ T7840] syzkaller0: entered promiscuous mode [ 211.002387][ T7840] syzkaller0: entered allmulticast mode [ 211.482958][ T5839] usb 1-1: USB disconnect, device number 9 [ 211.555923][ T7856] netlink: 48 bytes leftover after parsing attributes in process `syz.0.621'. [ 212.034318][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.056728][ T5839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 212.215267][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 212.224315][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 212.228098][ T5839] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 212.246654][ T5839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.255821][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.255862][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.267081][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.284294][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.293269][ T9] usb 1-1: config 0 descriptor?? [ 212.510900][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.819208][ T7602] usb 1-1: USB disconnect, device number 10 [ 214.850481][ T5881] usb 5-1: USB disconnect, device number 3 [ 215.049393][ T7887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.633'. [ 215.494277][ T7602] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 215.678944][ T7602] usb 1-1: Using ep0 maxpacket: 8 [ 215.701539][ T7602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.740587][ T7602] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.796734][ T7602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.839677][ T7602] usb 1-1: config 0 descriptor?? [ 215.932953][ T7909] siw: device registration error -23 [ 216.081228][ T7602] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 216.134268][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.304339][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 216.345509][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.383837][ T5881] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.424286][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.488016][ T5881] usb 5-1: config 0 descriptor?? [ 216.757616][ T5881] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 218.116091][ T7602] usb 1-1: USB disconnect, device number 11 [ 218.384526][ T5839] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 218.794539][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 218.832696][ T5839] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 218.854764][ T5839] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.877129][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.981218][ T7930] netlink: 48 bytes leftover after parsing attributes in process `syz.0.646'. [ 219.222030][ T5839] usb 5-1: USB disconnect, device number 4 [ 219.716573][ T7934] block nbd4: shutting down sockets [ 220.124305][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.294257][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 220.301448][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.319338][ T46] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.344059][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.377317][ T46] usb 4-1: config 0 descriptor?? [ 220.589965][ T46] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 220.807381][ T7958] 9pnet_virtio: no channels available for device syz [ 220.872925][ T9] usb 2-1: USB disconnect, device number 13 [ 221.807008][ T7972] netlink: 48 bytes leftover after parsing attributes in process `syz.2.660'. [ 222.139143][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.474235][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 222.519796][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.567473][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.814378][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.834876][ T9] usb 2-1: config 0 descriptor?? [ 222.945843][ T5881] usb 4-1: USB disconnect, device number 8 [ 223.059487][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.564249][ T5881] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 224.304240][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 224.311541][ T5881] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 224.323444][ T5881] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.342127][ T5881] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.362809][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.385271][ T5881] usbtmc 4-1:16.0: bulk endpoints not found [ 224.468062][ T5848] Bluetooth: hci5: sending frame failed (-49) [ 224.475941][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 224.492436][ T7999] Bluetooth: hci5: Frame reassembly failed (-84) [ 224.590504][ T8004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.672'. [ 225.441971][ T46] usb 2-1: USB disconnect, device number 14 [ 225.479033][ T8015] syzkaller1: entered promiscuous mode [ 225.484689][ T8015] syzkaller1: entered allmulticast mode [ 226.620445][ T5912] usb 4-1: USB disconnect, device number 9 [ 227.684270][ T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.864761][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 228.064575][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.154283][ T46] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.163480][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.236408][ T46] usb 1-1: config 0 descriptor?? [ 228.471803][ T8045] netlink: 48 bytes leftover after parsing attributes in process `syz.1.683'. [ 228.581295][ T46] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 228.852669][ T5912] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 230.274255][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 230.284087][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.295270][ T5912] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.304735][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.317222][ T5912] usb 4-1: config 0 descriptor?? [ 231.384318][ T5912] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 231.534434][ T5881] usb 1-1: USB disconnect, device number 12 [ 231.619453][ T8048] block nbd1: shutting down sockets [ 233.725035][ T7602] usb 4-1: USB disconnect, device number 10 [ 233.779565][ T8084] netlink: 48 bytes leftover after parsing attributes in process `syz.3.695'. [ 234.564366][ T5881] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 235.626000][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 236.025540][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.041438][ T5881] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 236.054292][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.064427][ T5881] usb 5-1: config 0 descriptor?? [ 236.278727][ T5881] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 237.278045][ T9] usb 5-1: USB disconnect, device number 5 [ 237.523932][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 239.805599][ T8167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.722'. [ 241.628792][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 241.812141][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 241.820117][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.838114][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.850142][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.875360][ T9] usb 5-1: config 0 descriptor?? [ 242.112488][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 242.222634][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.730'. [ 244.543275][ T8215] netlink: 48 bytes leftover after parsing attributes in process `syz.1.736'. [ 244.756458][ T5912] usb 5-1: USB disconnect, device number 6 [ 245.696000][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 247.048940][ T8249] netlink: 48 bytes leftover after parsing attributes in process `syz.3.747'. [ 247.484393][ T5912] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 248.424555][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 248.484432][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 248.992777][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.006313][ T5912] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 249.015546][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.025509][ T5912] usb 2-1: config 0 descriptor?? [ 249.239805][ T5912] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 250.858515][ T5839] usb 2-1: USB disconnect, device number 15 [ 250.952025][ T8297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.761'. [ 253.494459][ T5912] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 253.804572][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 253.864221][ T7602] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 253.896829][ T5912] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 253.937593][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 253.973420][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.003766][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.034405][ T7602] usb 3-1: Using ep0 maxpacket: 8 [ 254.037365][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.049937][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.061271][ T7602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.063389][ T5912] usbtmc 1-1:16.0: bulk endpoints not found [ 254.096380][ T7602] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.105523][ T7602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.169249][ T7602] usb 3-1: config 0 descriptor?? [ 254.383116][ T7602] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 255.876142][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882646][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.254268][ T5839] usb 1-1: USB disconnect, device number 13 [ 256.383889][ T7602] usb 3-1: USB disconnect, device number 12 [ 258.586790][ T8382] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 258.623273][ T8382] bond5: entered promiscuous mode [ 258.630875][ T8386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.788'. [ 258.634603][ T8382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.774084][ T8387] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.802516][ T8387] bond5: (slave bond6): making interface the new active one [ 258.819522][ T8387] bond6: entered promiscuous mode [ 258.872337][ T8387] bond5: (slave bond6): Enslaving as an active interface with an up link [ 258.924552][ T5839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 258.925230][ T8387] syz.2.789 (8387) used greatest stack depth: 18328 bytes left [ 258.940930][ T7602] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 259.084395][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 259.114358][ T7602] usb 4-1: Using ep0 maxpacket: 8 [ 259.534820][ T5839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.546390][ T5839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.564572][ T5839] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.575524][ T5839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.588813][ T5839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.598042][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.612071][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.623966][ T7602] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 259.633252][ T7602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.988884][ T7602] usb 4-1: config 0 descriptor?? [ 260.010754][ T5839] usbtmc 5-1:16.0: bulk endpoints not found [ 260.204712][ T7602] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 260.862653][ T8410] [ 260.865030][ T8410] ============================================ [ 260.871629][ T8410] WARNING: possible recursive locking detected [ 260.877785][ T8410] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 260.884371][ T8410] -------------------------------------------- [ 260.890531][ T8410] syz.0.798/8410 is trying to acquire lock: [ 260.896426][ T8410] ffff8880343c7208 (vm_lock){++++}-{0:0}, at: move_pages+0x26b/0x1680 [ 260.904663][ T8410] [ 260.904663][ T8410] but task is already holding lock: [ 260.912046][ T8410] ffff8880336d6e88 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 260.920349][ T8410] [ 260.920349][ T8410] other info that might help us debug this: [ 260.928420][ T8410] Possible unsafe locking scenario: [ 260.928420][ T8410] [ 260.935882][ T8410] CPU0 [ 260.939172][ T8410] ---- [ 260.942462][ T8410] lock(vm_lock); [ 260.946197][ T8410] lock(vm_lock); [ 260.949945][ T8410] [ 260.949945][ T8410] *** DEADLOCK *** [ 260.949945][ T8410] [ 260.958097][ T8410] May be due to missing lock nesting notation [ 260.958097][ T8410] [ 260.966428][ T8410] 2 locks held by syz.0.798/8410: [ 260.971456][ T8410] #0: ffff8880336d6e88 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 260.980196][ T8410] #1: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 260.989988][ T8410] [ 260.989988][ T8410] stack backtrace: [ 260.995904][ T8410] CPU: 0 UID: 0 PID: 8410 Comm: syz.0.798 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 260.995929][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.995948][ T8410] Call Trace: [ 260.995955][ T8410] [ 260.995963][ T8410] dump_stack_lvl+0x241/0x360 [ 260.995985][ T8410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.996002][ T8410] ? __pfx__printk+0x10/0x10 [ 260.996025][ T8410] ? lockdep_unlock+0x16a/0x300 [ 260.996049][ T8410] print_deadlock_bug+0x483/0x620 [ 260.996071][ T8410] ? validate_chain+0x11e/0x5920 [ 260.996094][ T8410] validate_chain+0x15e2/0x5920 [ 260.996118][ T8410] ? __pfx_validate_chain+0x10/0x10 [ 260.996143][ T8410] ? __pfx_validate_chain+0x10/0x10 [ 260.996166][ T8410] ? __pfx_validate_chain+0x10/0x10 [ 260.996191][ T8410] ? mark_lock+0x9a/0x360 [ 260.996213][ T8410] ? __lock_acquire+0x1397/0x2100 [ 260.996239][ T8410] ? reacquire_held_locks+0x3eb/0x690 [ 260.996262][ T8410] ? mark_lock+0x9a/0x360 [ 260.996290][ T8410] __lock_acquire+0x1397/0x2100 [ 260.996316][ T8410] lock_acquire+0x1ed/0x550 [ 260.996335][ T8410] ? move_pages+0x26b/0x1680 [ 260.996354][ T8410] ? __pfx_lock_acquire+0x10/0x10 [ 260.996380][ T8410] ? mas_walk+0x1f3/0x280 [ 260.996403][ T8410] lock_vma_under_rcu+0x35f/0x9a0 [ 260.996422][ T8410] ? move_pages+0x26b/0x1680 [ 260.996436][ T8410] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 260.996454][ T8410] ? move_pages+0x26b/0x1680 [ 260.996470][ T8410] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 260.996494][ T8410] ? uffd_lock_vma+0x91/0x2c0 [ 260.996512][ T8410] move_pages+0x26b/0x1680 [ 260.996530][ T8410] ? lockdep_hardirqs_on+0x99/0x150 [ 260.996548][ T8410] ? __pfx_move_pages+0x10/0x10 [ 260.996567][ T8410] userfaultfd_ioctl+0x5221/0x6840 [ 260.996594][ T8410] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 260.996612][ T8410] ? stack_trace_save+0x118/0x1d0 [ 260.996630][ T8410] ? __pfx_stack_trace_save+0x10/0x10 [ 260.996647][ T8410] ? stack_depot_save_flags+0x37/0x940 [ 260.996667][ T8410] ? kasan_save_track+0x51/0x80 [ 260.996686][ T8410] ? kasan_save_track+0x3f/0x80 [ 260.996705][ T8410] ? kasan_save_free_info+0x40/0x50 [ 260.996721][ T8410] ? __kasan_slab_free+0x59/0x70 [ 260.996741][ T8410] ? kfree+0x196/0x430 [ 260.996755][ T8410] ? tomoyo_path_number_perm+0x679/0x860 [ 260.996772][ T8410] ? security_file_ioctl+0xc6/0x2a0 [ 260.996788][ T8410] ? __se_sys_ioctl+0x46/0x170 [ 260.996807][ T8410] ? do_syscall_64+0xf3/0x230 [ 260.996823][ T8410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.996846][ T8410] ? do_vfs_ioctl+0xf07/0x2e40 [ 260.996867][ T8410] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 260.996886][ T8410] ? mark_lock+0x9a/0x360 [ 260.996910][ T8410] ? tomoyo_path_number_perm+0x206/0x860 [ 260.996926][ T8410] ? __pfx_lock_release+0x10/0x10 [ 260.996948][ T8410] ? tomoyo_path_number_perm+0x679/0x860 [ 260.996965][ T8410] ? tomoyo_path_number_perm+0x679/0x860 [ 260.996984][ T8410] ? tomoyo_path_number_perm+0x6f9/0x860 [ 260.997000][ T8410] ? __lock_acquire+0x1397/0x2100 [ 260.997020][ T8410] ? tomoyo_path_number_perm+0x206/0x860 [ 260.997037][ T8410] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.997068][ T8410] ? __pfx___schedule+0x10/0x10 [ 260.997091][ T8410] ? __fget_files+0x2a/0x410 [ 260.997109][ T8410] ? __fget_files+0x2a/0x410 [ 260.997126][ T8410] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 260.997146][ T8410] __se_sys_ioctl+0xf5/0x170 [ 260.997166][ T8410] do_syscall_64+0xf3/0x230 [ 260.997184][ T8410] ? clear_bhb_loop+0x35/0x90 [ 260.997206][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.997233][ T8410] RIP: 0033:0x7fc498f85d29 [ 260.997253][ T8410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.997273][ T8410] RSP: 002b:00007fc499e2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.997293][ T8410] RAX: ffffffffffffffda RBX: 00007fc499176080 RCX: 00007fc498f85d29 [ 260.997305][ T8410] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000009 [ 260.997316][ T8410] RBP: 00007fc499001b08 R08: 0000000000000000 R09: 0000000000000000 [ 260.997326][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.997336][ T8410] R13: 0000000000000000 R14: 00007fc499176080 R15: 00007fff0a489328 [ 260.997354][ T8410] [ 261.684289][ T5882] usb 5-1: USB disconnect, device number 7 [ 262.550596][ T7602] usb 4-1: USB disconnect, device number 11